++ generate camunda and zitadel vault secrets for vad, drop conflicting db entries

infrastructure-secrets.yaml

@@ -3333,12 +3333,25 @@ environments:
                 create_smtp_auth: false
                 create_django_auth: false
                 create_rsa_keys: false
-                create_infra_secrets: false
+                create_infra_secrets: true
-                create_infra_policies: false
+                create_infra_policies: true
-                create_infra_roles: false
+                create_infra_roles: true
                 create_app_policies: false
                 create_app_roles: false
             applications: {}
+            data:
+                infrastructure:
+                    zitadel:
+                        postgresql:
+                            enabled: ENC[AES256_GCM,data:fplysw==,iv:wvMF0Ci+qMHR2edSh9R7tlIo3FFUO6xMfN3LMfiUdJU=,tag:qsIQG11ExHZ+hPg6EwVnKQ==,type:bool]
+                            generate: ENC[AES256_GCM,data:ZJXWPQ==,iv:lWZh+7jo6+2+dgomSrXemPYKDx90q4X3xlob7gHlJ2s=,tag:GKbfMJHXyqzH7EejrP0EfA==,type:bool]
+                    camunda:
+                        postgresql:
+                            enabled: ENC[AES256_GCM,data:vnof0w==,iv:h2PIwpJSD/CEZi2vWVVJoRW6pQG5Oxo07Y9n0zmpXoQ=,tag:3qK5gZFwB8kUYb6It70exQ==,type:bool]
+                            generate: ENC[AES256_GCM,data:j65EOw==,iv:B7h/PaVk+R/73DhFtEmAdD400dj+U29t1GXYDcpO63A=,tag:SKoVhgINr1yQhGqOqGbwtw==,type:bool]
+                        keycloak_admin:
+                            enabled: ENC[AES256_GCM,data:DSjxig==,iv:0JRmblA+hbldF+2KjWq6jLF1uLUnRpLVsG0mvQ30S48=,tag:noXT8L5vkpatfQgdfmyPcw==,type:bool]
+                            generate: ENC[AES256_GCM,data:mrCOdw==,iv:L1fuYUXmM3zhSyIwdMw1kEklLkrGNQO9E6R5FlMZvP4=,tag:21TZqNfHcpu2+X/gcn4YaQ==,type:bool]
         secrets: []
 sops:
     kms: []
@@ -3364,8 +3377,8 @@ sops:
             U1hiSTkrMzRwMGpOeGtYNnNyNElYOE0KOHsFrj5+iMx8tIymrIhLpB8xbLaztR7J
             E+ViNs6OGeIS90qwxAD7OP9raGB/lsTfh9V/zigM8gF+OzGErF73aQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-25T17:02:45Z"
+    lastmodified: "2026-08-26T08:36:57Z"
-    mac: ENC[AES256_GCM,data:Kmrba0/xzpIOIxcFwSE90Q+gzMjsmyNoYxuPAq9ZrumWBdNnWyLWvdNcotoUQCMfjgcxZ+oG7lCx866odDSIA4N02z4b9fdJCuwMrb+eyl02nqTBvGCrOQ4kriblWqCnmSk4FD+7v1PuJsKQkjNIf9/t3riMh1T8FCvwPibNFlk=,iv:w3dKDnXxzxgr+dvwSz2xGPnj8JKOc14YegxOKHn6Bf8=,tag:ilBYwD6HVmP/kuRAIwfMpw==,type:str]
+    mac: ENC[AES256_GCM,data:CsabmmH29n9KOLVw5IwTVbzyfdla33HtgLwh2nfQiH+RzoCub3o5o2jGcKyZddLtqFs+NIS0p1yOFaRrAHbZl8gyBOkBqBE8rkRx8Zh6Skvp98EhRMUKrNnjCMywIfdjibliHvYa48LvFHRvdtZjfHitKXP3rMd1SZXnzNkU5SI=,iv:L+OSZ+lsVEjOoPgBkxktIwOPm4PgP6G3sgONHPjlAAs=,tag:XC/F2VFJW9FrGQchO7F+xA==,type:str]
     pgp: []
     encrypted_regex: ^(data)$
     version: 3.12.2

infrastructure.yaml

@@ -659,36 +659,6 @@ environments:
           password_special: false
           conn_limit: 20
 
-      - cluster_id: main
-        database:
-          name: identity
-          extensions: []
-        user:
-          name: identity
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: bitnami_keycloak
-          extensions: []
-        user:
-          name: bn_keycloak
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: zitadel
-          extensions: []
-        user:
-          name: zitadel
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
     minio: {}
     buckets: []